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(54) DATA PROCESSING SYSTEM 
(57)Abstract 

PURPOSE: To reduce tiie processing time without deteriorating the 
secrecy of data in the data transmission system between an IC card 
and a terminal equipment 

CONSTITUTION: A password PIN1 inputted by a carrier of an IC 
card 12 is ciphered according to a predetermined key data Rd to 
generate a key data K1. A synthesis text data Ml resulting from 
adding an additional data CER1 to a text data D1 representing a 
deposit balance or the like is ciphered according to the key data K1 
to generate a ciphered text data ME. The ciphered synthesis text 
data ME has information comprising the text data D1 and the 
password PIN1. The ciphered synthesis text data ME is decoded 
and separated into a text data D2 and an additional data CER2. The 
separated additional data CER2 is compared with the additional data 
CER1 stored in advance in the IC card 12. As a result, the adequacy 
Df the correlation PIN1 and the text data D2 is judged. Then the 
number of times of ciphering/decoding and the number of times of 
data transmission reception between the terminal equipment 11 and 
the IC card 12 are reduced to reduce the time required for session. 
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* NOTICES * 

JPO and HCIPI are not responsible for any 
damages caused by the use of this translation. 

Uhls document has been translated by oomputer. So the translation may not reflect the original precisely. 
2.**** shows the word which can not be translated. 
3 Jn the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] . , . x u.*.- *u 4-u' 

[Claim 1] By enciphering wordinr-o^-a-^^elegram data with transmits ng-side equipment, transmitting the this 
enciphered wording-of-a-telegram data to receiving-side equipment, and decrypting the wording-of-a-telegram 
data this enciphered with receiving-side equipment In the data-processing method which sends and receives these 
wording-of-a-telegram data the above-mentioned transmitting-side equipment A data addition means to add 
discernment data to the above-mentioned wording-ol^a-telBgram data, and to generate synthetic word.ng-of-a- 
telegram data, The Ist encryption means which enciphers with the 1st key data which was able to define the 
password code beforehand, and generates the 2nd key data. While having the 2nd encryption means which enciphers 
the above-mentioned synthetic wording-of-a-telegram data with the key data of the above 2nd, and generates code 
Domposrtion wording-of-a-telegram data, and a transmitting means to transmit the above-mentioned code 
Domposition wording-o^a-telegram data to the above-mentioned receiving-side equipment A receiving means to 
receive the code composition wording-of-a-telegram data with which the above-mentioned receiving-side 
equipment was transmitted from the above-mentioned transmitting means, A decryption means to decrypt the 
above-mentioned code composition wording-of-a-telegram data according to the 3rd key data correspondmg to the 
key data of the above 2nd. and to generate decode composition wording-of-a-teiegram data, A data separation 
tneans to divide the above-mentioned decode composition wordlng-of-a-i:elegram data into decode wording-o1^a 
telegram data and decode discernment data. When the above-mentioned decode addition data are compared with 
the above-mentioned addition data and the above-mentioned decode addition data and the above-mentioned 
addition data are in agreement, the above-mentioned password code, And it is the data-processing method 
characterized by having a comparative judgment means to judge that the above-mentioned password code and the 
above-mentioned decode wording-of-a-telegram data are inaccurate when it judges that the above-mentioned 
decode wording-Df-aH:eIegram data are just and the above-mentioned decode addition data and the above 
mentioned addition data are not in agreement j u • 

[Claim 2] The key data of the above 3rd are a data-processing method according to claim 1 charactenzed by it 
being generated beforehand and coming to be held with an authorization code and the 1st key data at the store of 
. the above-mentioned receiving-side equipment 
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DETAILED DESCRIPTION 



[Detailed Desoription of the Invention] 
[0001] 

[Industrial Application] This invention relates to a data-processing method and the data-processing method which 
protects the confidentiality of the commo data used in an IC card and a card data processor in detail. 

[0002] , . . u 

[Description of the Prior Art] Conventionally, in the field of an infomiation communication link, techniques, such as 
encryption of communication linl< wording of a telegram and electronic signature, have been used as a means to 
prevent the so-called securh:y rislcs, such as tapping of the communication link wording of a telegram by the 
malfeasance, and forgery. For example, data-processing methods, such as "the approach of transmitting secret data 
between a sending set and a receiving set, equipment", etc. which are shown in the open patent official report No. 
136058 [ Showa 56 to ]. have been thought out 

[0003] Drawing 3 is the outline block diagram showing an example of such a conventional data-processing method. 
This data-processing method has a terminal (transmitting side) 31 and IC card (receiving side) 32, and is 
constituted. If. as for this data-processing method. IC card 32 holder inputs the password code PIN 1 into a terminal 
31 , the wording-oi^a-telegram data 01, such as the deposits-and-savings balance, will be written in IC card 32 as 
wording-of-a-telegram data D 2 at 10 card 32. 

[0004] In a terminal 31, the standard key data R which can change the value at random are enciphered by the 
encryption means 311. and the proper key data R1 are generated. It is transmitted by the transceiver means 316 
and this standard key data R is inputted into the encryption means 321 through the transceiver means 326 of IC 
card 32. This encryption means 321 generates the proper key data R2 based on the standard key data R. 
[0005] By changing this standard key data R into each session (data communication between a terminal and an IC 
card) of every at random, it made it difficult that the proper key data R1 and R2 were known by the third party, and 
uryust acts, such as tapping of wording-oi^a-telegram data D1 grade and forgery of IC card 32, are prevented. 
Moreover, also when the proper key data R1 and R2 are known by the third party in a certain session, since the 
standard key data R are changed at random, even the proper key data R1 and R2 In other sessions should not be 

known. . j t 

[0006] Then, in a tenninal 31, the password code PIN 1 is enciphered considering the above-mentioned proper Key 
data R1 as a key by the encryption means 312. and the code password code AVI is generated. This code password 
code AVI is inputted into the decryption means 322 through the transceiver means 31 6 and the transceiver means 
326. Then, the code password code AVI is decrypted considering the above-mentioned proper key data R2 as a 
key. and the password code PIN 2 is generated. The comparison means 323 compares the decrypted password code 
PIN 2 with the password code PIN 1 in which it was beforehand stored by IC card 32. And as a result of meaning 
whether the password code PIN 2 is in agreement with the password code PIN 1. IC card 32 outputs data C1 to a 

terminal 31. . . oic 

[0007] The result data C1 are inputted into the decision means 313 through the transceiver means 326 and 316. 
When it is judged that the password code PIN 2 of the decision means 313 does not correspond with the password 
code PIN 1 from the result data C1, the session concerned is inten-upted and IC card 32 is discharged from a 
terminal 31. On the other hand, when the password code PIN 2 was in agreement with the password code PIN 1 and 
the decision means 313 judges, it is carried out by the next processing continuing. 

[0008] The wording-cf-a-telegram data D1 are enciphered by the encn/ption means 314 by using the above- 
mentioned proper key data R1 as a key, and the encryption wording-of-a-telegram data DE are generated. The 
encryption wording-o-f^a-telegram data DE are inputted into the decryption means 324 through the transceiver 
means 316 and 326. The encryption wording-of-a-telegram data DE are decrypted by the decryption means 324 by 
using the above-mentioned proper key data R2 as a key, and the wording-of-a-telegram data D2 are generated. 
[0009] The wording-of-a-telegram data D2 are written in the memory in IC card 32 (not shown). The decision 
means 325 Judges whether processing of the writing of the wording-of-a-telegram data 02 etc. was performed 
normally, and transmits the result data C2 to the decision means 315 through the transceiver means 315 and 326. 
As a result of decision, if processing of the writing of the wording-o1^a-telegram data D2 etc. is normal, the session 
processing concerned will be ended, and if not normal, IC card 32 will be discharged from a terminal 31. 
[0010] In addition, in the above-mentioned encryption means 312 and 314 and the decryption means 322 and 324. 
encryption algorithms, such as DES (Data Encryption Standard). FEAL. and RSA. are used. 
[0011] 
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oomp.r.W* to e-bft 7;"' "f,^" p,L«*B .hown ir «,= d=to-pf<.oM«ll,g ,T,.thod 

S^^r afel ? Mo a^ov^^^^^^^^^ oKcSh shortens th'e prooassin.ti,.e. when a simple method realized a 
rt^iroorssing me hod t^e confidentiality of data, such as wording-of-a-^eleEram data an authonzation code, and 
key daS Si. and the problem of becoming easy to generate a security nsk had ansen. 

EL of the Invention] Then, this Invention sets U as the object to offer the data-prooessing method which can 
shorten the processing time, without reducing the confidentiality of data, 

rM»?nl for ciolvinff the Problem] The data-processing method concerning invention according to claim 1 By 

„■! e.n.r.l.s Ih. 2nd k«V Whte k drt. »f L .bov. 2nd. .nd E.n.mt.. cod. composltton wording- 

r ^Sc'rbc ."rrrd a n..™ « *. cod. .o.p„Kion 

wcrS^o "-ttLra-n drt. with which th. .bov.-™«,tion.d r.c.lving-.id. .qu,pn,ont w.. Imnon.ll.d fr.». th. 
„ordln!-oF.-..l.r.m d^^^^^^^^ -"J ^''^'^^p^.^n ,0 dlvid. th. .b.v.-m.ntlcn.d 

ESEE^E^r-dSiit^^^^^^^^ 

data wnen xne apo ^Hdition data and the above-mentioned addition data are in agreement, the above 

meVtioredT^^^^^^^^^^^^^ above-mentioned decode wording-of-a-telegram data are 

; t tt' abor^ne^^^^^ decode addition data and ti.e above-mentioned addition data jot ,n a^ee^^^^^^ rt 
s the data-processing method characterized by having tiie above-mentioned password code and a comparative 
udlment mean to juSge tiiat the above-mentioned decode wordlng-of-a-telegram data are inaccurate 
[0014] DaSTooassinI method concerning invention according to claim 2 It is the data-process.nE method 
aocording^c 'raim 1 characterized by the key data of the above 3rd being generated beforehand and coming to hold 
■them witii an authorization code and the 1 st key data at a store. 

KlSinnl In a transmitting side the data-processing metiiod concerning invention according to claim 1 enciphers 
n aurlLtion^^^^^^^^^^^ the 1 st (determined according to card) key data defined before and^ and 

eenerrtes^e 2nd key data. Moreover, addition data are added to the word.ng-ol-a-telegram data '" which the 
con tert^Tch should be transmitted is shown, and synthetic wording-o^^-telegram data are ^--^J^^^ ^nd ti^^„ 
synthetic wording-of-a-telegram data is enciphered based on the key data of the above 2nd. and code oompos.t,on 
XlroraiTgram data are generated. This cede composition wording-of-a-telegram data ,s transmitted to a 

Sf^"!; a tSsini^J^vT^Led code compos^ion wording-of-a-telegram data are rec^ved through 
?ec i ^g meaT^hi code composftion wording-o1-a-telegram data is deco'pted with the a-'d^k^V J^ta^ ^^^^^^ ,^ 
JneratTs decode composition wording-cf-a-telegram data. This decode composition word.ng-of-a-telegram data is 
df„idI?L decode wo?ding-of-a-telegram data and decode discernment data. When this decode discernment data 
fs ™ red w"St^ discernment data and tiie above-mentioned decode discernment data and 

he aS -mrnWd discernment data are in agreement, it is judged tiiat the above-mentioned ^"th°nzat.o^^^^^^ 
and the above-mentioned decode wording-of-a-taiegram data are just Then, this wording-of-a-telegram data will 
be wriien in th^IC card which is receiving-side equipment, for example. On tiie contran., when the above- 
mentioned decode discernment data and the above-mentioned discernment data are not - "m d t^^^^^^^^^ 

that tiia above-mentioned authorization code and the above-mentioned decode wording-of-a telegram data are 
ir,=^^iir»+.. In this case wordinE-of-a-telegram data are not wntten in an IC card. 

FooTt T?us in^r^^^^^^^^^ rnoiph^ wording-of-a-telegram data with discernment data and to transmit, the routnie 
which t™^^^^ only an authorization code apart from transmission of wording-oFa-telegram -^^t^' -^^^nTdata 
the auLntication like before can be omWed. and tiie effectiveness of transmission °f ^-J'^^tl^^^;'^/;^'" '^'^ 
is r^sed Moreover, since discernment data and wording-of-a-telegram data are enciphered and decrypted 
simuSneously, tiie step of encryption and a decryption also decreases compared with tiie conventional oase, and 
?ireffectSss of the data transmission processing is raised. Furthermore, since tiie «"thor.zation code of a 
^opeV waTused for the receiving side in tiiis case and wording-of-a-telegram data are enciphered, the securrty 



JP,05-056037,A [DETAILED DESCRIPTION] 



3/4 K—iy 



about wording-of-a-telBgram data which transmits is raised even to the same extent as the case where it is 

S d tt key datrof rabove 3rd are generated beforehand and held at the storage of the above-mentioned 
recettr-side equipment For this reason, it is not necessary to transmit the key data of the above 3rd to 
reoe!I^s!dB ^Julpment from transmitting-side equipment, and the time amount wh.oh a session takes can be 

shortened. 

[Exlmple] Below, the example of this invention is explained, referring to a drawing. 

D0201 Drawing 1 is the block diagram showing the outline of the data-prooessmg method ooncermng the 1 st 
Sample^S^niention. This data-processing method has a terminal (transmitting side) 1 and IC card (receiving 

•XT 12 and is onsttu^ed. This example explains the case where the terminal by which online connection was 
made considering for example, the ATM card for banks as a terminal at the host computer of a bank is used as IC 
card 12 In S case an authorization code shall be the thing of a different proper for every card, and only the card 
hler shalltorrVherere hareaft^^^ a card holderinputs authorization code P1N1 into a terminal 31. a temiina 
p^rfo ms tXUetermined actuation, and the case where the credit of the fixed --"V?mrter"andTe 
rPvnlTinad Credit cash-drawer processing needs to be performed with a terminal and a host computer, and tlie 

redSal n^^^ ^"d /needs to write ti.is credit balance in a card, Consequently, ttje won^mg- 

o'aiele "m 3ata D1 in which tine credit balance and its writing are shown from a hos computer are transmitted 
to a terminal 31 , and a terminal ti^nsmits tinis wording-of-a-telegram data to an IC card. 

So21]T th te minal 11 which constitutes transmitting-side equipment, it has the ^"^f ^ ; J,^^ 

St enc^ption mTans 11 enciphers inputted authorization code PIN1 according to the key data Rd which are the. 
fde of^ ^c^ecy determined at the time of card -If^-f^f^^r^.^l.^f.."^- ^^^T' 

encn/Dtion means 11 is constituted by using the encryption algorrthm exhibited [ RSA / DES. FEAU J. 
0022 Mor^^^^^^^^^^ 1 1 ^^ds the discernment data CER1 to the above-mentioned wording-of-a-telegram 

data D1 has a d^ta addition means 112 to generate the synthetic word,ng-of-a-te legram data Ml the 2nd 
en?ryption means 113 which enciphers the synthetic wordlng-of-a-telegram data M , and generates the code 
cCmlsition wording-oi-a-telegram data ME, and the transceiver means (I/O circurt) 1 14 which transmit and 
TeS^e dl belween IC cards 12. and is constituted. The same open mold encryption algorrthm as the encrypfon 
meansof the above 1st also constitutes the 2nd encryption means 113. , . 

S On the other hand IC card 12 is constituted including B-bit CPU etc.. and this CPU is performing processing 
hown by ttfiing processing means. Namely, a transceiver means 124 by which IC card 1 2 transmits and 
ace" s data between' 11 (1/0 circuit). A decryption means 121 to decrypt -."^^^ --^-'^^^^^^^ 
a-telegram data according to the key data K2 which were able to be defined beforehand, and to generate the 
rnthet 0 wordine-of-a-telegram data M2, A data separation means 1 22 to divide the synthetK: wording-of-a- 
tSrani d^ta M2^nto tiie wording-o^-^elegram data D2 and the discernment data CER2. The d.scemmen data 
?ER2 aTe Tomparrd with the discernment data CER1, and autiiorization code PIN1 and the word.ng-of-a-teleBram . 
data M2 haveT oomparative judgment means 123 to judge whether it is the right and are constrtuted. Furthermore. 
Jihough not illustrated, this IC card 12 has EEPROM in which data, such as the above-mentioned credrt balance, 

iZufZ^^ote-Z^^^^^^^ -ans 121 can process ti,e inverse function of the above-mentioned 

encryption means 113. and these decryption means 121 and the encryption means 13 can use enoryption 
aS^ms such as DES, FEAL. and RSA like the above. Moreover. ti.e processing in tiie above-mentioned data 
. addiSon means 112 and the data separation means 122 may use what kind of mo e of processing, as long as the 
wordine-of-a-telegram data D2 and the discernment data CER2 are disengageable . . 

Fo02STn a^dit n t^^^^^ terminal has ti.e decision means 115, this decision means judges forwar 

of wo ding-o1-a^elegram data and an authorization code ]. and injustice based on tiie response from the above 
mentioned IC card, for example, when inaccumte, a right case orders it the blowdown processing from the terminal 
of the 10 card concerned etc.. while outputtingtiiat to a host computer , • j x ■ *u„ fl„w 

So26] Next, an operation of the data-processing method concerning ti.is exampb 

chart of drawinei In this flow chart S201-S204 show the processing by the side of a terminal 11. and S205 S211 

SmXS cLt inp^ulJeSi a ten^inal 1 1 by the IC card holder According to the key data Rd 

determied It Ihe time of card issuance, it enciphers with the encryption means 111, and authorization code PIN1 
SrerT el th^ tey dl K1 (S201). And about tine wording-ol-a-telegram data D1 in which the credrt balance from a 
Tost comp. er etc. is shown, the discernment data CER1 are added to the wording-of-a;rte^gram data D witi. the 
daS aSStion means 112 (for example, a parity bft is added), and the synthetic wording-of-a-telegram data Ml are 

loS^tSZL this synthetic wording-of-a-telegram data Ml is enciphered ^^^.^'^f.^^h^stT'""*""' 
key data K1 and the code composition wording-of-a-telegram data ME are generated (S203) This code 
composWon wording-of-a-telegram data ME is transmitted to IC card 1 2 through the transceiver means 14 (S204). 
ZseqtntV IC card 1 2 receives tills code composition wording-of-a-telegram data through the transceiver 

^529] Tht' received code oomposftion wording-of-a-telegram data ME are deciypted by the decryption means 121 
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acoording to the key data K2, and the synthetic wording-of-a-telegram data M2 are generated (S205). The key data 
K2 have the value corresponding to the above-mentioned key data K1. and the decryption means 121 Performs 
decryption processing according to the operations sequence of the above-mentioned encryption means 113 and 
reverse. In addition, the key data K2 can also use data equivalent to the above-mentioned key data K1, and you may 
make It receive this key data K2 from a terminal 1 1 after session initiation by using the encryption a"e°rrthm of 
object key methods, such as DES. Furthermore, the key data K2 enciphered with the key data Rd which are the st 
key data beforehand set up according to each card in the authcrization code (personal identification number) which 
may store in 10 card 12 the value defined at the time of issuance of IC card 12, for example, is inputted at the bnie 
of each card issuance may be beforehand stored in IC card 12. Since the count cf transmission and reception of the 
data of a teminal 1 1 and IC card 12 becomes fewer when the key data K2 are stored in 10 card 12. much more 

high-speed processing can be aimed at ..... j- _4. i „ 

[0030] Furthermore, this synthetic wording-of-aHelegram data M2 is separated into the word,nr-cf-a-telegram 
data D2 and the discernment data CER2 by the data . separation means 122 (S2D6). The comparative judgment 
means 123 compares the separated discernment data CER2 with the discernment data CER1 in which it was stored 
by 10 card 12 at the time of 10 card issuance (S207). In addition, the discernment data CER1 stored in 10 card 12 
are equivalent to the discernment data CER1 stored in the above-mentioned terminal 11. ^ ^. 

[0031] As a result of a comparison, when the separated discernment data CER2 are in agreement with the 
discernment data CER1, YES), above-mentioned authorization code PIN1. and the wording-of-a-telegram data D2 
are judged to be the rights by (S207 (S208). Consequently, as a result of showing normal processing, the wording- 
of-a-telegram data D2 In which this credit balance is shown transmit data CO to the transceiver means 114 through 
the transceiver means 124. while being written in EEPROM of IC card 12 (S209). As a result, the decision means 
11 5 temiinates the session of 10 card 12 and a terminalll according to data CO. 

[0032] As a result of a- comparison, when the separated discernment data 0ER2 are not '"/sreement wrth the 
discernment data 0ER1, it is judged by (S207 that NO), above-mentioned authorization code PIN1. and the wordmg- 
of^-telegram data D2 are not right (S210). That is. authorization code P1N1 judges that the not an authorization 
code but wording-of-a-telegram data D2 of 10 card 12 in the session concerned differ from the wording-o^a- 
telegram data D1 as a result processed with the host computer. Therefore, without writing this wording-of-a- 
telegram data D2 in IC card 12, as a result of showing exception processing, data CO are transmitted to the 
transceiver means 114 through the transceiver means 124. Consequently, the decision means 115 discharges IC 
card 12 from a terminal 11 (S211). and a session is terminated. Consequently, the urjust writing to IC card 12 is 

[0033? As mentioned above, as explained, in this example, it enciphers according to the key data K1 which generated 
the wording-of-a-telegram data D1 from authorization code PIN1. and the code composition wording-o-Fa-telegram 
data ME are generated. Therefore, in addition to the wording-ol^-telegram data D1. the code composition wordmg- 
of-a-telegram data ME will also have the information on authorization code PIN1. For this reason, the data- 
processing method concemlng this example does not need to perform encryption and a decryption for authorization 
code P1N1 and the wording-of^a-telegram data D1 independently, as performed by the conventional data- 
processing method. Moreover, as compared with the conventional data-processing method, transmission and 
reception of the data between a terminal and an IC card decrease from 4 times to 2 times, and tfie count of ^ 
encryption and a decryption is decreasing the data-processing method concerning this example from 6 times to Z 
times. Therefore, according to this' example, the time amount which the session between a terminal and an IC card 
takes can be substantially decreased from Number sec to hundreds msec(s). 

[0034] Moreover, the key data K1 are generated by enciphering different authorization code PIN1 for every IC card. 
For this reason, since the key data K1 of other 10 cards 12 will not be known even if authorization code PIN1 of 0 
card 12 of one sheet is known by the third party, the confidentiality of the data of other 10 cards 12 does not fall. 
Therefore it is not spoiled to the confidentiality of the data of other 10 cards, and the damage by the so-called 
security risk can be suppressed to the minimum. Furthermore, also when a third party acquires others' 10 card 12. if 
a third party does not know the authorization code of this IC card, the data encryption and the decryption are 

[0035]^Therefore, the data-processing method concerning this example can shorten the time amount which a 
session takes, without reducing the confidentiality of data as compared with the conventional data-processing 
method. 

[0036] . L J -iU t 

[Effect of the Invention] The data-processing method which can shorten the processing time can be offered without 
reducing the confidentiality of data according to this invention, as explained above. 
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g^nitisi^^ouSi^diaran. showing the data^prooessing method oonoeming the 1st example of this 

[pTawing'a It is the flov. chart which shows aotuation of the data-processing method concerning the 1 at example of 

SiSlK is the outline block diagram showing an example of the conventional data-processing method. 
[Description of Notations] 

11 Terminal System (Transmitting Side) 

12 IC Card (Receiving Side) 

111 1st Encryption Means 

112 Data Addition Means 

11 3 2nd Encryption Means 

1 1 4 Transceiver Means (Transmitting Means) 

121 Decryption Means 

122 Data Separation Means 

123 Comparative Judgment Means 

124 Transceiver Means (Receiving Means) 
D1 Wording-of-a-te!egram data 

D2 Wording-of-a-telegram data (decode wordingr-of-a-telegram data} 
PIN1 Authorization code 
CER1 Discernment data 

CER2 Discernment data (decode discernment data) 

Ml Synthetic wording-of-a-lelegram data r , 

U2 Synthetic wording-oi^a-telegram data (decode composition wording-of-a-telegram data; 

RdKey data (1st l<ey data) 

K1 Key data (2nd key data) 

K2 Key data (3rd key data) 
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